$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a6e54584-efce-347d-ba82-48ed44d8acea.roa File: a6e54584-efce-347d-ba82-48ed44d8acea.roa (raw, json) Hash identifier: rEBgt/X53YBv60tGlD8FoGgPYLXAvqmm7Peqb2R93wE= Subject key identifier: 24:08:57:4F:F8:F8:8A:42:EE:3C:CF:69:B3:9A:B3:E6:70:B7:88:D2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A51D07CA4D4ADB23C8382D880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a6e54584-efce-347d-ba82-48ed44d8acea.roa Signing time: Thu 26 Jun 2025 13:01:04 +0000 ROA not before: Thu 26 Jun 2025 13:01:04 +0000 ROA not after: Wed 24 Sep 2025 13:01:04 +0000 asID: 20940 IP address blocks: 23.209.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:51:d0:7c:a4:d4:ad:b2:3c:83:82:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 26 13:01:04 2025 GMT Not After : Sep 24 13:01:04 2025 GMT Subject: CN=96cc578b-0c4a-4558-bc55-9b949cc5dd6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:89:a7:98:c3:ae:9e:a5:3f:39:e5:cd:e3:86: a4:a4:ad:fe:e1:8d:a7:17:46:f9:1f:a4:f5:f9:8e: 5a:28:b7:3b:17:03:f2:14:a3:14:56:1f:f5:d1:32: 8e:c0:29:f9:56:28:9d:9a:24:0c:6d:f1:65:1c:65: c1:aa:7a:43:d7:92:a1:ff:b4:63:9f:c6:49:1c:cf: 5a:32:1c:e8:52:da:04:1c:fa:3f:8c:54:05:58:32: 9c:90:69:29:3c:2b:e7:13:5d:23:b9:50:8c:87:ef: dd:b7:0e:79:05:89:88:81:35:9d:6e:a6:28:1c:2c: 65:4d:71:33:13:28:0a:aa:bf:0a:13:cc:44:3d:26: 1c:86:00:48:35:72:37:e6:5f:a3:a5:e0:65:40:41: 45:b4:e5:9c:44:a0:ea:d1:b9:01:53:2e:e8:99:da: 5e:fa:8b:19:32:e9:8f:d0:15:95:b0:f9:f5:63:fa: 64:8a:cb:d7:af:91:42:6e:fa:49:84:b6:90:df:cd: 88:2a:e8:82:63:6d:9d:28:ac:3a:30:6d:17:7e:dd: 2c:59:8c:35:fd:fb:86:e8:6d:ea:1d:9f:4b:10:88: 19:a8:4f:8f:5d:95:e0:99:34:ff:6e:21:c1:32:31: 19:3e:f4:d5:03:e0:c3:24:76:43:05:7c:5d:38:a6: c3:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:08:57:4F:F8:F8:8A:42:EE:3C:CF:69:B3:9A:B3:E6:70:B7:88:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a6e54584-efce-347d-ba82-48ed44d8acea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:8b:6e:1d:0d:b0:fc:11:c6:bb:ef:38:d1:12:ef:ae:1d:ff: 6f:c8:49:ef:a3:89:c6:29:c4:d9:ca:f6:34:af:cb:e7:bd:d5: 28:87:f1:3b:9d:c6:61:33:c5:41:e9:36:60:24:19:4d:47:46: 3f:62:05:55:b9:4c:c0:93:0f:3d:16:fd:8e:d6:0c:97:c7:bf: f7:b8:69:57:9a:cd:c5:2c:13:b6:8c:da:f8:a4:72:91:4e:bd: ec:1c:1f:41:f4:dd:10:f6:ad:3f:75:43:dd:23:0c:3f:af:cd: 25:08:ca:46:7f:31:54:29:7c:8b:90:a7:b9:4f:2f:33:c4:ed: 56:cb:f2:36:58:29:6a:b7:13:78:ad:d9:de:48:82:e1:d6:38: b9:af:41:3a:84:7d:8a:40:6d:97:02:3d:74:9a:5f:5b:79:7b: b8:0b:54:28:30:a8:82:ab:59:72:7e:70:ae:9c:51:9a:d5:c0: 17:c1:0a:52:9d:c9:35:f9:01:70:99:3b:f6:59:f7:c9:93:27: 17:d5:07:e3:a5:23:e8:e2:a4:f9:f6:b8:1c:76:07:5b:b7:1f: 9e:39:eb:73:b0:2e:90:43:33:ae:a2:5f:69:72:27:24:38:98: 31:6a:ba:c2:ea:27:05:44:cb:9d:ff:45:cc:bb:91:37:3a:50: 2d:d5:c0:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpR0Hyk1K2yPIOC2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyNjEzMDEwNFoXDTI1MDkyNDEzMDEwNFowLzEtMCsGA1UEAxMk OTZjYzU3OGItMGM0YS00NTU4LWJjNTUtOWI5NDljYzVkZDZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4mnmMOunqU/OeXN44akpK3+4Y2nF0b5H6T1 +Y5aKLc7FwPyFKMUVh/10TKOwCn5ViidmiQMbfFlHGXBqnpD15Kh/7Rjn8ZJHM9a MhzoUtoEHPo/jFQFWDKckGkpPCvnE10juVCMh+/dtw55BYmIgTWdbqYoHCxlTXEz EygKqr8KE8xEPSYchgBINXI35l+jpeBlQEFFtOWcRKDq0bkBUy7omdpe+osZMumP 0BWVsPn1Y/pkisvXr5FCbvpJhLaQ382IKuiCY22dKKw6MG0Xft0sWYw1/fuG6G3q HZ9LEIgZqE+PXZXgmTT/biHBMjEZPvTVA+DDJHZDBXxdOKbD+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCQIV0/4+IpC7jzPabOas+Zwt4jSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTZlNTQ1ODQtZWZjZS0z NDdkLWJhODItNDhlZDQ0ZDhhY2VhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9GnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACyLbh0NsPwRxrvvONES764d/2/ISe+jicYpxNnK9jSvy+e91SiH8Tud xmEzxUHpNmAkGU1HRj9iBVW5TMCTDz0W/Y7WDJfHv/e4aVeazcUsE7aM2vikcpFO vewcH0H03RD2rT91Q90jDD+vzSUIykZ/MVQpfIuQp7lPLzPE7VbL8jZYKWq3E3it 2d5IguHWOLmvQTqEfYpAbZcCPXSaX1t5e7gLVCgwqIKrWXJ+cK6cUZrVwBfBClKd yTX5AXCZO/ZZ98mTJxfVB+OlI+jipPn2uBx2B1u3H54563OwLpBDM66iX2lyJyQ4 mDFqusLqJwVEy53/Rcy7kTc6UC3VwAo= -----END CERTIFICATE-----Generated at Tue Jul 1 09:56:17 2025 by rpki-client